Overview

overview

10

Static

static

1

Synapse Launcher.exe

windows10-2004-x64

10

Resubmissions

01-04-2023 12:55

230401-p53yeaab35 10

01-04-2023 01:14

230401-blyyfsgc51 10

01-04-2023 01:12

230401-bk2mysgc5s 1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Synapse Launcher.exe

  • Size

    788KB

  • Sample

    230401-blyyfsgc51

  • MD5

    20e1eb6b9b733bbd26ac8be5be603de2

  • SHA1

    36beefc2467d94b5ec9ae843b2bb099898581bed

  • SHA256

    73af760ad2ffdd931210079ef4b719a1a8c41a864e7d0a39faa5c1783fb140d6

  • SHA512

    d486fc560f0f6d94428b58ae041a17053659e78c49fe9154ca9e642d692da43aeb7dd3f03b1aeb428ea398bdbdfab743960c2f0fa885cd97bc31655be2e42e0b

  • SSDEEP

    12288:GoK0iEH0u6YNNCObkXxHDc/n3jUOSpUMh:nipzXonoOSpUMh

Score
10/10
lummaevasionstealertrojan

Malware Config

Targets

    • Target

      Synapse Launcher.exe

    • Size

      788KB

    • MD5

      20e1eb6b9b733bbd26ac8be5be603de2

    • SHA1

      36beefc2467d94b5ec9ae843b2bb099898581bed

    • SHA256

      73af760ad2ffdd931210079ef4b719a1a8c41a864e7d0a39faa5c1783fb140d6

    • SHA512

      d486fc560f0f6d94428b58ae041a17053659e78c49fe9154ca9e642d692da43aeb7dd3f03b1aeb428ea398bdbdfab743960c2f0fa885cd97bc31655be2e42e0b

    • SSDEEP

      12288:GoK0iEH0u6YNNCObkXxHDc/n3jUOSpUMh:nipzXonoOSpUMh

    Score
    10/10
    lummaevasionstealertrojan

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Downloads MZ/PE file

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Credential Access

Discovery

Query Registry

4
T1012

Virtualization/Sandbox Evasion

1
T1497

System Information Discovery

4
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks